On 11/17/25 3:54 PM, Scott Mayhew wrote:
> FWIW I have both Debian Trixie and Sid/Forky VMs, and krb5{,i,p} is
> working across the board for me. Normally I just use a plain MIT KDC,
> so I tried IPA and that works fine too.
Did you confirm the enctype used?
My repro steps, from initial mounted state:
kinit
kvno -e aes256-cts-hmac-sha384-192 <nfs spn>
ls /mnt/example
On my Debian Sid VM, if I do kinit and then immediately ls, the issue
does not occur. klist shows the acquired service ticket has an
aes256-cts-hmac-sha1-96 session key.
TWR
